# Coldcard Seed-Generation Flaw Pushes Bitcoin Losses Above $114 Million as Sweeps Continue

Galaxy Research traced the thefts to a March 2021 firmware change that routed key generation to a predictable software random-number generator. Wallets untouched for years are now moving coins.

- Published: 2026-08-04T05:32:35.401Z
- Canonical: https://polylog.news/crypto/2026-08-04/coldcard-seed-generation-flaw-pushes-bitcoin-losses-above-11
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Bitcoin Magazine](https://bitcoinmagazine.com/news/coldcard-bitcoin-theft-continues), [Polylog editors](https://polylog.news), [CoinDesk](https://www.coindesk.com/markets/2026/08/04/a-bitcoin-wallet-dormant-since-2013-moved-usd31-million-and-it-s-not-the-only-one), [Bitcointalk Dev & Technical](https://bitcointalk.org/index.php?topic=5589927.0)

The theft from bitcoin addresses created by Coldcard hardware wallets is continuing. [Bitcoin Magazine puts the running total above $114 million](https://bitcoinmagazine.com/news/coldcard-bitcoin-theft-continues), and [Watcher Guru reported the figure passing $100 million](https://t.me/WatcherGuru/14541) late on Monday. Estimates differ by counting method and by the hour. Galaxy Research, which mapped the drains, [counted 1,367 BTC worth about $88.6 million across 4,585 addresses](https://www.coindesk.com/tech/2026/08/02/bitcoin-cold-wallet-attack-spreads-to-4-500-addresses-as-losses-near-usd89-million) in its confirmed set. By contrast, [Fortune reported roughly 1,816 BTC, close to $116 million, already moved off affected wallets](https://fortune.com/2026/08/03/bitcoin-owners-116-million-hack-coldcard-coinkite-exploit/). The first set of drains on 30 July emptied 1,196 addresses in 41 minutes.

The root cause is a failure of randomness, not a defect in bitcoin itself. According to Galaxy's analysis, a firmware integration error introduced in March 2021 routed recovery-seed generation to a deterministic software pseudorandom number generator instead of the hardware random number generator on the device's STM32 chip. An attacker who can narrow down the device identifier, the timer state and prior generator calls can reproduce candidate key streams offline, derive the resulting addresses and match them against the public ledger. No physical access to any device was required.

Coinkite, the Canadian manufacturer, has published patched firmware, halted shipments and destroyed the remaining affected stock. It is [telling users to move funds to newly generated seeds immediately](https://bitcointalk.org/index.php?topic=5589927.0). Migration is the only remedy, because the device alone cannot show its owner that a seed was safely generated.

A second effect is now visible on-chain. CoinDesk reports [a wallet dormant since 2013 moved $31 million on Monday, part of a wider set of old coins in motion since the hack](https://www.coindesk.com/markets/2026/08/04/a-bitcoin-wallet-dormant-since-2013-moved-usd31-million-and-it-s-not-the-only-one). Some of that is precautionary migration by holders who cannot rule out exposure. Some of it is the attackers. Block data alone cannot separate the two in real time.

## What this means

The failure sits in key generation, the one layer self-custody users cannot audit themselves, so the cost falls on long-term holders who followed the security guidance exactly. The immediate channel is forced migration. Every affected holder must move coins, which adds real spot supply and exchange deposits while bitcoin trades near $63,000. The wider channel is demand shifting from personal key management toward custodians and exchange-traded funds, the opposite of what hardware wallets were sold to achieve, and that shift affects Coinkite's competitors as much as Coinkite.

## What to watch

- Whether the drains stop once patched-firmware migration spreads, which would confirm that the population of vulnerable seeds is bounded rather than open-ended.
- Whether other hardware wallet vendors publish audits of their own randomness paths, since a single silent fallback to software entropy is the kind of defect that recurs across firmware codebases.
- Continued movement of coins dormant for a decade or more, which indicates how much of the old holder base is migrating rather than selling.